Privacy Policy

Last updated: 11 April 2026

Data processing and advertising services are managed by Giovanni Enterprises Limited.

Florence & May operates this store and website, including all information, content, features, tools, products and services, to provide you with a personalised shopping experience (the "Services"). Florence & May is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use, or make a purchase or other transaction through the Services, or when you communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described here.

Personal information we collect or process

When we use the term "personal information", we mean information that identifies or can reasonably be associated with you or another person. It does not include information collected anonymously, or de-identified so that it cannot reasonably be associated with you. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories, including information derived from them:

• Contact details, including your name, address, billing address, shipping address, phone number and email address.
• Financial information, including card numbers, debit cards and financial accounts, payment information, transaction details, payment method and payment confirmations. (Full card numbers are handled by our payment processor and are not stored by us.)
• Account information, including your username, password, security questions, preferences and settings.
• Transaction information, including items you view, add to cart, add to your wishlist, purchase, return, exchange or cancel, and your past transactions.
• Communications with us, including the information you include when you contact our customer service.
• Device information, including information about your device, browser or network connection, your IP address and other unique identifiers.
• Usage information, including how and when you interact with or use the Services.

Sources of personal information

We may collect personal information from the following sources:

• Directly from you, such as when you create an account, visit or use the Services, communicate with us, or otherwise provide your personal information to us;
• Automatically through the Services, such as from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
• From our service providers, such as when we engage them to provide certain technologies and they collect or process personal information on our behalf;
• From our partners or other third parties.

How we use your personal information

Depending on how you interact with us or which Services you use, we may use your personal information for the following purposes:

Providing, personalising and improving the Services. We use your personal information to provide the Services, including to perform our contract with you, process your payments, fulfil your orders, save your preferences and the items you're interested in, send account-related notifications, handle purchases, returns, exchanges and other transactions, create and manage your account, arrange shipping, facilitate returns and exchanges, enable you to post reviews, and create a personalised shopping experience — for example, by recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.

Marketing and advertising. We use your personal information for marketing and promotional purposes, such as sending you marketing and promotional communications by email, SMS or post, and showing you online advertising for products or services on the Services or other websites — for example, based on items you've previously purchased or added to your cart, and other activity on the Services. We send commercial electronic messages in accordance with the Spam Act 2003 (Cth), and every marketing message includes an unsubscribe option.

Security and fraud prevention. We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect and investigate or respond to potentially fraudulent, illegal, dangerous or malicious activity, protect public safety, and secure our Services. If you choose to use the Services and create an account, you are responsible for keeping your login credentials secure. We strongly recommend you do not share your username, password or other access information with anyone.

Communicating with you. We use your personal information to provide customer service, respond to your enquiries, provide effective services, and maintain our business relationship with you.

Legal reasons. We use your personal information to comply with applicable laws or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil proceedings, actual or potential disputes or other legal processes, and to enforce or investigate possible violations of our terms or policies.

How we disclose personal information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes in accordance with this Privacy Policy. These circumstances may include:

• With Shopify, vendors and other third parties who perform services on our behalf (for example, IT management, payment processing, data analytics, customer support, cloud storage, order fulfilment and shipping).
• With business and marketing partners to provide marketing services and show you advertising. For example, we use Shopify to support personalised advertising with third-party services based on your online activity across different merchants and websites. Our business and marketing partners use your information in accordance with their own privacy policies. Depending on where you live, you may have the right to ask us not to share your information for targeted advertising based on your online activity across different merchants and websites.
• When you direct, authorise or otherwise consent to us sharing certain information with third parties, such as to ship you products, or through your use of social media widgets or login integrations.
• With our affiliates or within our corporate group.
• In connection with a business transaction such as a merger or insolvency; to comply with legal obligations (including responding to subpoenas, search warrants and similar requests); to enforce applicable terms or policies; and to protect or defend the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit through the Services is shared with Shopify and with third parties that may be located in countries other than where you live, to provide and improve the Services.

In addition, to protect, develop and improve our business, we use certain advanced features of Shopify that integrate data and information from your interactions with our store, other merchants and Shopify. To provide these features, Shopify may use personal information collected in connection with your interactions with our store, other merchants and Shopify. In these cases, Shopify is responsible for processing your personal information, including handling requests to exercise your rights regarding its use of your personal information for these purposes.

For more information about how Shopify uses your personal information and what rights you may have, see Shopify's consumer privacy policy. Depending on where you live, you may be able to exercise certain rights over your personal information through the Shopify privacy portal.

Third-party websites and links

The Services may contain links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms. We do not guarantee and are not responsible for the privacy or security practices of such sites, including the accuracy, completeness or reliability of information found there.

Information you provide in public or semi-public areas, including information you share on third-party social media platforms, may be seen by other users of the Services and/or those third-party platforms. The inclusion of such links does not imply endorsement of the content of those platforms or their owners or operators, unless expressly stated.

Children's data

The Services are not intended for children, and we do not knowingly collect personal information from children under the minimum age in your jurisdiction. If you are a parent or guardian of a child who has provided us with personal information, you may contact us using the details below to request its deletion. As of the effective date of this Privacy Policy, we have no actual knowledge that we "share" or "sell" personal information of individuals under 16 years of age (as those terms are defined by applicable law).

Security and retention of your information

Please note that no security measure is perfect or completely impenetrable, and we cannot guarantee "absolute security". In addition, information you send us may not be secure while in transit. We recommend you do not use insecure channels to send us sensitive or confidential information.

How long we retain your personal information depends on a variety of factors, including whether we need it to manage your account, provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

Your rights and choices

Depending on where you live, you may have some or all of the rights below in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in some cases we may decline your request as permitted by law. Under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, these include:

• Right to access. You may have the right to request access to the personal information we hold about you.
• Right to correction. You may have the right to have inaccurate personal information corrected.
• Right to deletion. You may have the right to request deletion of your personal information.
• Right to data portability. You may have the right to receive a copy of your personal information and to request its transfer to a third party.
• Managing communication preferences. We may send you promotional emails, and you can unsubscribe at any time using the link provided. Even after you unsubscribe, we may still send you non-promotional emails (for example, about your account or orders).

If you are located in the United Kingdom or the European Economic Area, you additionally have the right to object to or restrict processing and to withdraw consent at any time (which does not affect the lawfulness of prior processing).

You can exercise these rights by contacting us. We will not discriminate against you for exercising your rights, and we may verify your identity before processing your request.

Complaints

If you have a complaint about how we process your personal information, please contact us using the details below. You also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. (If you are in the UK or EEA, you may complain to your local data protection authority.)

International transfers

Please note that we may transfer, store and process your personal information outside your country, including in the United States, China, and other countries where our service providers or fulfilment partners operate. Where we transfer personal information internationally, we take reasonable steps to ensure it is handled in accordance with applicable privacy law and this Privacy Policy.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the revised version on this website and update the "last updated" date.

Contact

For questions about this Privacy Policy or how we handle your personal information, contact us at support@florence-may.com.